Skip to content
fr Sign in
6.5 Medium

CVE-2024-10524 Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the…

Description

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

Affected products and versions

Product Affected versions Fixed in
wget 1.25 earliest → < 1.25.0 1.25.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of wget

The 3 CVEs of wget →
CVE-2026-16599 GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality 5.1 Medium CVE-2024-38428 url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be… 9.1 Critical
Track this CVE